Acceptable Use Policy

This Acceptable Use Policy (“AUP”) governs the manner in which you (“User”) may use TWILOX (https://www.twilox.com), operated by Agentix Global Services LLC. It is incorporated by reference into the Terms of Service and should be read together with the Privacy Policy. Violation of this AUP is a material breach of the Terms and grounds for immediate suspension or termination of User access, with no refund and full preservation ofAgentix Global Services LLC’s other rights and remedies.

1 · Lawful purpose only

The User warrants and represents that every query submitted to TWILOX, and every use, disclosure, or onward processing of any dossier or finding, is for a lawful purpose under all applicable laws — including the User’s jurisdiction, the data subject’s jurisdiction, and any jurisdiction whose laws apply to the User’s business or organisation. Lawful bases include (without limitation) informed consent of the data subject, a court order, a journalistic public-interest investigation, statutory due-diligence (KYC / AML / fraud prevention), legitimate interest properly balanced under Article 6(1)(f) GDPR, and other bases recognised by applicable law. Agentix Global Services LLCdoes not verify the User’s legal basis; sole responsibility rests with the User.

2 · Prohibited uses

The following uses of TWILOX are strictly prohibited. This list is non-exhaustive; conduct that is harmful, unlawful, or contrary to the spirit of the AUP is prohibited even if not specifically listed.

2.1 Harm to persons

• Stalking — repeated, unwanted monitoring or location-tracking of any individual.
• Harassment — threatening, abusive, degrading, or intimidating conduct directed at any individual.
• Doxxing — publishing or threatening to publish personally identifying information of any individual without their consent and without a lawful public-interest basis.
• Threats — threats of violence, sexual violence, blackmail, extortion, or other criminal harm to any person.
• Illegal surveillance — surveillance of any person where such surveillance violates applicable anti-stalking, wiretapping, or privacy law.
• Domestic-abuse facilitation — use against a current or former intimate partner, family member, or household member to locate, monitor, or coerce that person.
• Targeting protected groups — use to target any person on the basis of race, ethnicity, religion, national origin, sexual orientation, gender identity, disability, immigration status, or political belief.

2.2 Unlawful conduct

• Identity theft & fraud — use to impersonate any person, open accounts in another person’s name, or commit financial fraud.
• Defeating access controls — using findings to attempt unauthorised access to any third-party system, account, or service in violation of the U.S. Computer Fraud and Abuse Act, the EU NIS2 Directive, the UK Computer Misuse Act, or analogous law.
• Violating data-subject rights — processing personal data in violation of GDPR, UK GDPR, CCPA / CPRA, LGPD, PIPEDA, or any analogous data-protection law, including failure to honour an erasure request properly directed to the User as controller.
• Discrimination — using findings in any decision (employment, credit, housing, insurance, education, healthcare) in a manner prohibited by anti-discrimination law (e.g., U.S. Fair Credit Reporting Act, EEOC guidance, EU Equal Treatment Directives).
• FCRA-regulated use — TWILOX is not a consumer reporting agency and dossiers are not consumer reports under the Fair Credit Reporting Act. The User must not use any dossier in whole or in part to make decisions about credit, employment, insurance, housing, or any other “permissible purpose” under 15 U.S.C. § 1681b.
• Sanctions evasion / export control — use by, or on behalf of, persons or entities on any applicable sanctions list (OFAC SDN, EU consolidated, UK HM Treasury, UN Security Council).

2.3 Abuse of the platform itself

• Reselling reports as a service — operating a managed service, “OSINT-as-a-service” offering, white-label, or reseller business that runs TWILOX queries on behalf of third parties, without a separate written commercial agreement with Agentix Global Services LLC.
• Scraping or reverse-engineering — using crawlers, bots, scrapers, headless browsers, or any automated means to extract data from TWILOX other than the documented purchase + delivery flow; reverse-engineering, decompiling, or attempting to derive the source code of the service.
• Circumventing the paywall — sharing, replaying, or otherwise circumventing checkout tokens; using a stolen payment method; chargeback abuse; account-sharing to evade per-case pricing.
• Public sharing of dossier URLs — publicly posting, indexing, or otherwise disclosing a dossier URL or its contents in a manner that allows non-authorised parties to view the dossier. Dossier URLs are sealed to the purchasing account and must not be shared outside that account.
• Bulk submission abuse — automated submission of queries at rates intended to extract the underlying source dataset rather than to produce specific investigations.
• Interference with the service — denial-of-service, brute force, vulnerability scanning without prior written authorisation, or any activity that degrades availability for other users.
• Misrepresentation — providing false billing information, false legal-basis representations, or false identity to Agentix Global Services LLC.

3 · Cooperation with law enforcement

Agentix Global Services LLC may, in its sole discretion and in accordance with applicable law, disclose User information (including account data, query inputs, dossier output, billing records, and server logs) in response to a valid legal process — including a subpoena, court order, search warrant, mutual-legal-assistance request, or an administrative request from a law-enforcement, regulatory, or supervisory authority of competent jurisdiction. Agentix Global Services LLC may also disclose such information where it has a good-faith belief that disclosure is necessary to (a) comply with applicable law, (b) protect the rights, property, or safety of Agentix Global Services LLC, its users, or the public, (c) investigate or prevent fraud or abuse, or (d) enforce the Terms or this AUP. By using the service, the User acknowledges and consents to such disclosure. Where permitted by law, Agentix Global Services LLC will give the affected User reasonable advance notice of disclosure.

4 · Enforcement

Agentix Global Services LLC reserves the right, at its sole discretion and without prior notice, to investigate suspected violations of this AUP and to take any of the following actions:

• warn the User and demand cessation of the offending conduct;
• throttle, rate-limit, or restrict access to specific features;
• suspend the User’s account temporarily, including any active subscription;
• terminate the User’s account permanently, including any active subscription;
• cancel pending dossier deliveries;
• delete the User’s data (subject to retention obligations);
• refer the matter to law enforcement or to a regulatory authority;
• pursue civil remedies, including indemnification under §8 of the Terms.

No refund will be issued in connection with any suspension, termination, or cancellation arising from a suspected or actual violation of this AUP, consistent with §9 of the Terms (All Sales Final · No Refunds). Agentix Global Services LLC’s exercise (or non-exercise) of these rights is not a waiver of any other right or remedy.

5 · Reporting abuse

If you believe a User is violating this AUP, or that a dossier has been used against you in violation of applicable law, please report it to abuse@twilox.com. Include as much detail as you can — the nature of the violation, the relevant URL(s) if any, dates / times, and your contact information for follow-up. We triage abuse reports promptly and will acknowledge receipt. Reports made in good faith are confidential to the extent permitted by law.

For privacy / data-subject rights requests: privacy@twilox.com. For legal notices and DMCA: legal@twilox.com (see §16 of the Terms for the DMCA agent designation).